Meta may collect sensitive personal data categories such as health, religious beliefs, political views, and sexual orientation if you provide them, and may also draw inferences about these characteristics from other data it collects.
This analysis describes what Meta Ads's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
The collection and inference of special category data carries heightened legal obligations under GDPR and many other frameworks, and creates elevated privacy risk if that data is used in advertising targeting or shared with partners.
Interpretive note: The extent to which Meta's inference practices with respect to special category data are subject to the same legal basis requirements as explicit collection of such data is legally contested and jurisdiction-dependent.
The updated Privacy Policy no longer explicitly directs US residents to the United States Regional Privacy Notice, which previously provided details about consumer privacy rights available under stat…
If Meta infers sensitive characteristics about you from behavioral data, those inferences may influence the ads and content you see, even if you never explicitly disclosed that information, and the policy's disclosure of this practice is broad enough to warrant close attention by users who have not consciously shared such data.
How other platforms handle this
When you visit the Careers portion of our websites, we collect the information that you provide to us in connection with your job application. This includes but is not limited to business and personal contact information, professional credentials and skills, educational and work history and other in...
American does not knowingly collect personal information directly from children – persons under the age of 13, or another age if required by applicable law – other than when required to comply with the law or for safety and security reasons. Due to the nature of our Services, we may collect travel i...
We may collect information about your location, including precise geolocation information, when you use our Services. We use this information to provide location-based services, such as showing you products available in your area, and for other purposes described in this Privacy Policy.
Monitoring
Meta Ads has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 10 platforms.
"We collect and process information about you, including information that is protected under applicable law, such as your racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, health data, sex life or sexual orientation, or biometric or genetic data, where you choose to provide such information or where it is required by applicable law. We may infer or derive information about you based on the information we collect.— Excerpt from Meta Ads's Meta Privacy Policy
1) REGULATORY LANDSCAPE: GDPR Article 9 prohibits processing of special category data without explicit consent or another enumerated exception, enforced by EU/EEA supervisory authorities. The CCPA/CPRA establishes a distinct category of 'sensitive personal information' with specific opt-out rights. The FTC has indicated heightened scrutiny of sensitive data practices by large platforms. Many national laws outside the EU similarly impose stricter requirements for health, biometric, and religious data. 2) GOVERNANCE EXPOSURE: High. The disclosure that Meta may 'infer or derive' sensitive characteristics from general behavioral data, without specifying what inferential methods are used or how resulting inferences are governed, creates substantial exposure under GDPR Article 9 and CPRA's sensitive personal information framework. The key legal question is whether inferred special category data is treated with the same legal basis requirements as explicitly collected data. 3) JURISDICTION FLAGS: EU/EEA jurisdictions impose the strictest requirements, requiring explicit consent or a specific Article 9(2) exception for processing special category data. Illinois BIPA may be relevant if biometric data is collected or inferred. California's CPRA sensitive personal information category covers health data, racial or ethnic origin, religious beliefs, and sexual orientation, with a dedicated opt-out right. 4) CONTRACT AND VENDOR IMPLICATIONS: Advertisers using Meta's targeting tools should assess whether their campaign targeting parameters could constitute use of special category inferences, which may expose them to liability in some jurisdictions independent of Meta's own obligations. 5) COMPLIANCE CONSIDERATIONS: Compliance teams should assess whether Meta's consent mechanisms for special category data meet GDPR's explicit consent standard, and whether the inference disclosure is sufficiently specific to satisfy transparency requirements. A data protection impact assessment may be warranted for any processing involving inferred sensitive characteristics at scale.
Full compliance analysis
Regulatory citations, enforcement risk, and due diligence action items.
Free: track 1 platform + weekly digest. Watcher: 10 platforms + same-day alerts. No credit card required.
Netflix updated its Privacy Statement on April 18, 2026, disclosing voice recording collection and expanded household ad profiling for the first time.
Google's Privacy Policy covers Search, Gmail, YouTube, Maps, and every site running Google Analytics. Here is what it actually authorizes.
Professional Governance Intelligence
Need to monitor specific governance provisions?
Professional includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.
Built from archived source documents, structured governance mappings, and historical version tracking.
The collection and inference of special category data carries heightened legal obligations under GDPR and many other frameworks, and creates elevated privacy risk if that data is used in advertising targeting or shared with partners.
If Meta infers sensitive characteristics about you from behavioral data, those inferences may influence the ads and content you see, even if you never explicitly disclosed that information, and the policy's disclosure of this practice is broad enough to warrant close attention by users who have not consciously shared such data.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Meta Ads.